Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer
File:                     4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer (raw, json)
Hash identifier:          qmInes3WQCuukq+8G0EHye6d5QW/SSOVnMXwaDBXT/Y=
Subject key identifier:   4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       39347A3BA3BA47EE92DE005A9AADDBC71E9389E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Aug 2023 16:28:44 +0000
Certificate not after:    Fri 09 Aug 2024 16:33:44 +0000
Subordinate resources:    AS: 262578
                          IP: 177.84.32.0/21
                          IP: 2804:658::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:34:7a:3b:a3:ba:47:ee:92:de:00:5a:9a:ad:db:c7:1e:93:89:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 11 16:28:44 2023 GMT
            Not After : Aug  9 16:33:44 2024 GMT
        Subject: CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:11:7c:75:3e:91:7b:b0:62:51:52:22:2f:e4:
                    dd:61:7a:69:bc:a7:c0:d7:83:28:b1:e2:96:c5:d4:
                    e8:57:8a:1b:fd:cd:c6:80:c3:b0:cf:b6:b7:ad:15:
                    14:73:36:25:71:e3:80:10:76:f2:c5:8c:0c:40:16:
                    3b:21:82:da:0a:cc:70:94:14:02:22:af:8e:ec:d4:
                    de:77:1d:eb:01:38:c8:ce:28:e0:75:b1:b7:c8:d5:
                    6b:63:81:13:d2:ff:2f:01:0f:cd:5f:66:d3:28:25:
                    a1:2b:c3:9e:d0:e8:46:25:e9:8c:28:d3:90:c1:a0:
                    10:ad:23:d9:c9:b6:7d:31:87:b0:49:40:0b:fe:47:
                    91:0c:f2:56:fe:e6:76:e7:07:9b:3b:98:35:9f:62:
                    d5:fb:69:03:d3:b4:62:90:6a:75:76:66:69:b3:e8:
                    c6:10:c1:d2:2b:7b:e9:9b:10:8f:fa:33:57:27:90:
                    94:96:fc:0a:f9:ec:f5:32:f7:ca:50:99:8d:40:94:
                    92:c3:4a:87:8a:55:aa:e3:6f:e6:d8:81:d9:ae:69:
                    95:73:3a:af:7b:4b:68:73:02:cd:09:37:d8:10:56:
                    ca:00:13:bc:75:cf:e7:fb:1e:06:96:00:99:13:d1:
                    73:6e:c2:df:b7:75:e9:91:fd:84:2f:d6:49:76:10:
                    37:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.32.0/21
                IPv6:
                  2804:658::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262578

    Signature Algorithm: sha256WithRSAEncryption
         23:17:82:0d:f3:10:72:0a:c4:06:ab:cc:1f:e5:ca:f8:62:3b:
         2c:97:2b:b1:f2:54:cb:75:c4:35:9b:cd:4d:f9:d2:65:5e:9d:
         51:64:a7:1f:53:9f:80:56:7a:a9:75:42:59:7a:2c:34:fb:8f:
         5e:eb:ac:df:20:bf:59:6a:65:c3:6b:98:f6:2d:14:cb:86:58:
         ab:b2:9c:09:d4:53:64:7a:83:39:84:17:26:74:e2:04:f0:fb:
         53:07:b5:7a:14:52:96:f4:6e:11:9a:f2:20:08:d7:c5:ee:41:
         bf:b2:a8:cc:8c:fe:8c:6d:04:d4:07:de:31:25:37:2f:49:73:
         41:e8:ee:21:6a:56:4e:42:1a:c5:95:98:33:0c:2d:5d:c5:21:
         a7:f7:db:88:eb:b4:eb:87:ac:5e:bf:0a:b1:2c:8b:a2:f3:ca:
         05:ef:d0:0e:65:f7:b9:5d:94:78:f4:7d:4e:59:16:88:a1:8f:
         14:d5:10:cd:b9:0a:85:68:f0:c0:ba:58:79:1b:e3:f9:2a:b1:
         9e:e1:b4:86:56:21:eb:30:db:97:2e:2f:d6:a2:18:f9:fe:c5:
         30:a5:63:f1:ff:f5:62:28:fd:76:fa:26:30:55:be:d9:fd:80:
         2c:58:02:68:b1:8a:8f:93:af:ae:65:61:1a:8b:a2:24:4f:63:
         8e:dc:a4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----